CVE-2015-1854

Опубликовано: 19 сент. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/74392
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2015:0895
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1209573
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157069.html
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/74392
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2015:0895
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1209573
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/07/msg00018.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fedoraproject:389_directory_server:*:*:*:*:*:*:*:*

Версия до 1.3.3.9 (включая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01632

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVE-2015-1854

CVSS3: 7.5

ubuntu

больше 8 лет назад

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

CVE-2015-1854

redhat

почти 11 лет назад

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

CVE-2015-1854

CVSS3: 7.5

debian

больше 8 лет назад

389 Directory Server before 1.3.3.10 allows attackers to bypass intend ...

GHSA-v685-gqm8-hvj7

CVSS3: 7.5

github

больше 3 лет назад

389 Directory Server before 1.3.3.10 allows attackers to bypass intended access restrictions and modify directory entries via a crafted ldapmodrdn call.

ELSA-2015-0895

oracle-oval

почти 11 лет назад

ELSA-2015-0895: 389-ds-base security update (IMPORTANT)

EPSS

Процентиль: 82%

0.01632

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-284